Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
RE: HTTP worm?
Aug 27 2007 11:13PM
Dario Ciccarone (dciccaro) (dciccaro cisco com)
Using port 80/tcp or any other well-known port (23/tcp, 22/tcp, 21/tcp,
etc.) was an old trick back when firewalls were nothing more than
stateless ACLs and people neede to allow 'return traffic' from those
ports for connections initiated from the inside (and forgot the
"established" keyword ;))
[ more ]
Copyright 2010, SecurityFocus